(usagi-users 01070) draft-ietf-ipsec-ciph-sha-256-00.txt

[Shoichi Sakane <sakane@xxxxxxxx>]

i don't know the address to the usagi core.  so i send this information
to this mailing list.  we have sha2 for aes, but the length of the
authentication value of ESP or AH haven't been defined.  the following
draft expresses it.  i'm not sure 96bit is enough.

> 	Title		: The HMAC-SHA-256-96 Algorithm and Its Use With IPsec
> 	Author(s)	: S. Frankel, S. Kelly
> 	Filename	: draft-ietf-ipsec-ciph-sha-256-00.txt
> 	Pages		: 8
> 	Date		: 16-Nov-01
> 	
> Ths document describes the use of the HMAC algorithm in conjunction
> with the SHA-256 algorithm as an authentication mechanism within the
> context of the IPsec Authentication Header and the IPsec Encapsulat-
> ing Security Payload. HMAC with SHA-256 provides data origin authen-
> tication and integrity protection. This version of the HMAC-SHA-256
> authenticator specifies truncation to 96 bits, and is therefore named
> HMAC-SHA-256-96.
> 
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-ipsec-ciph-sha-256-00.txt